CVE-2022-43698

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.6-rev30

Description The issue allows for Server-Side Request Forgery (SSRF) because changing a POP3 account disregards the deny-list. This occurs when the OX App Suite is configured to use POP3 accounts and an attacker can manipulate the account settings to bypass restrictions.

Recommendations For versions prior to 7.10.6-rev30, update to version 7.10.6-rev30 or later to resolve the issue. As a temporary workaround, consider restricting access to the POP3 account configuration to minimize the risk of exploitation.